mirror-mind 0.39.2 → 0.39.3

package/README.md

@@ -76,6 +76,9 @@ in your machine, not a server.
 - [Node.js 24+](https://nodejs.org/) — runs Mirror Mind's core
   (`node --version` must be ≥ v24; POSIX/macOS/Linux supported). Nothing
   else to install: there is no Python and no build step
+- On Windows: [Mirror Mind for Windows](https://github.com/mirror-mind-ai/mirror-installer),
+  a separate per-user installer that brings Node, Git Bash, Pi and Mirror in
+  one pass. It lives in its own repository, outside this package and its CI
 - [OpenRouter](https://openrouter.ai) account with at least $5 in credits —
   embeddings, memory extraction, and multi-LLM
 - An AI runtime subscription:

package/docs/releases/index.md

@@ -12,6 +12,7 @@ Future release notes should use the structure defined in [Release Notes](../proc
 
 ## Releases
 
+- [v0.39.3 — Windows Gets Its Hooks](v0.39.3.md) — patch release of PR #53, PR #50, and PR #54 (@rodrigoimmaginario): the plugin's hook wrappers and MCP locator run the package's own bin when npm's global entry is a shell shim, so Claude Code hooks and the MCP server work on a Windows package install; `runtime diagnose` no longer counts its own verdict as a front-door error (CR139); the docs point a Windows reader to the installer in its own repository. No migration.
 - [v0.39.2 — Input, Read the Platform's Way](v0.39.2.md) — patch release of PR #49 and PR #48 (@rodrigoimmaginario), CR194, and CR193: `runtime diagnose` stops warning every Windows install about Node; a PowerShell byte-order mark is not stored; stdin is decoded by its mark, UTF-8 or UTF-16, and `identity set` and `journey update` gain `--file`, the route around PowerShell 5.1's ASCII pipe; `package-lock.json` names the package at its version, and the release doctor checks it. No migration.
 - [v0.39.1 — Pi Finds Its Node, or Says So](v0.39.1.md) — patch release of PR #47 (@rodrigoimmaginario) and CR191: a Pi opened where `node` is not on the PATH no longer exits; the Pi extension resolves Node where the hook wrappers look, so a global install needs nothing configured; when no Node resolves, one warning names the fix and `runtime diagnose` reports the `hooks.log` line. No migration.
 - [v0.39.0 — The Core as a Library](v0.39.0.md) — minor release of CV24's first eight Delivery Stories: `mirror-mind/desktop`, a library entry through which a host such as Mirror Desktop 0.3 embeds this core; calls for a home's migration state, Conversations, sidebar reads, home creation, migration on request, Mirror's context, learning from open Conversations, and Journey administration, each with an explicit path and no environment. The new `exports` field closes every other deep import. No migration.

package/docs/releases/v0.39.3.md

@@ -0,0 +1,94 @@
+---
+digest: >
+  v0.39.3 is a patch release of three pull requests by Rodrigo Immaginario. On a Windows
+  package install, npm's global `mirror` and `mirror-hook` are shell shims, and the plugin's
+  hook wrappers and MCP locator handed them to Node: no Claude Code conversation was ever
+  logged there, and the MCP server died on arrival. They now run the package's own bin
+  (PR #53). `runtime diagnose` no longer counts its own "attention needed" exit as a
+  front-door error, so the finding stops feeding itself (PR #50, CR139). The docs point a
+  Windows reader to the installer that now lives in its own repository (PR #54). No
+  migration, and no model or prompt change.
+---
+
+# v0.39.3 — Windows Gets Its Hooks
+
+**Date:** 2026-11-03
+
+## Highlights
+
+- **Claude Code hooks and the MCP server work on a Windows package install**
+  ([PR #53](https://github.com/mirror-mind-ai/mirror/pull/53), by @rodrigoimmaginario). On
+  Windows npm writes no symlink: its global `mirror-hook` and `mirror` are POSIX shell
+  shims with `node_modules/` beside them. Handed to Node, the shim ran as JavaScript:
+  every hook ended `node exited 1` in `hooks.log`, and the MCP server died with a
+  `SyntaxError` from the shim's second line. The wrappers and the locator now run the bin
+  the shim wraps, one fixed path away, when it is there. A POSIX prefix is unchanged.
+- **`runtime diagnose` no longer counts its own verdict as a front-door error**
+  ([PR #50](https://github.com/mirror-mind-ai/mirror/pull/50), by @rodrigoimmaginario;
+  [CR139](../project/refinement/rs010-cv22-oracle-and-port-hygiene/cr139-a-verdict-that-exits-1-is-logged-as-a-front-door-error.md)).
+  Its exit 1 means "attention needed", a contract with scripts, and the front door logged
+  it as `ERROR`, which `front_door_errors` then counted: one more error per run, a finding
+  that could never clear. The exit is now logged at `INFO` as a verdict; a real failure of
+  the same command stays `ERROR`.
+- **A Windows reader is pointed to the installer**
+  ([PR #54](https://github.com/mirror-mind-ai/mirror/pull/54), by @rodrigoimmaginario):
+  [mirror-mind-ai/mirror-installer](https://github.com/mirror-mind-ai/mirror-installer), a
+  per-user installer in its own repository, from README, Getting Started, and REFERENCE's
+  platform envelope. The envelope itself is unchanged: this repository ships no Windows
+  product, and POSIX is what is supported.
+- No migration, and no model or prompt change.
+
+## Where We Started
+
+v0.39.2 shipped the morning's Windows fixes: `runtime diagnose` reading the PATH the
+platform's way, and PowerShell's marks and encodings on stdin. Three of Rodrigo's PRs
+remained, and the largest of them was the one that mattered most: on a Windows package
+install, Mirror's Claude Code integration had never worked, and nothing said so but
+`hooks.log`.
+
+The diagnose loop in PR #50 had been in the backlog three times over, CR127, CR139, and
+CR176, the last two captured without finding the first. The PR implements CR139's first
+option as written, arrived at independently. CR139 is done with Rodrigo as its Driver;
+CR127 and CR176 are closed as its duplicates.
+
+## What Changed
+
+**The shim rule, in the two generators.** `scripts/generate_hook_wrappers.sh` and
+`MCP_LOCATOR` in `ts/src/guards/claudePlugin.ts` each gain one rule: when
+`<dir of the entry>/node_modules/mirror-mind/bin/<entry>.js` exists, that is the entry.
+The twelve wrappers and manifests are regenerated from it, and regenerating on the merge
+leaves the tree unchanged. A hook test models the Windows prefix on POSIX with a fake
+Node that records the entry it was handed; a maintainer commit added the locator's
+run-as-written case, which fails on the previous locator.
+
+**The verdict, beside the command.** `isRuntimeVerdict` in `runtimeRoute.ts` says which
+exit is an answer; the dispatcher asks it. A maintainer commit moved the rule there from
+the dispatcher, and made the end-to-end test's finding sure on purpose (`loose_permissions`
+by `chmod`), since v0.39.1's Node search no longer guarantees the one the test had relied
+on.
+
+## Conscious Exclusions
+
+- Windows is not a supported platform of this repository: CI runs the suite on macOS and
+  Ubuntu, and the Windows job runs two files. The installer repository pins the core it
+  tests against. Whether that changes is a later decision.
+- The front-door log's `route=usage` lines still count as errors (CR139's second option,
+  not taken). On the maintainer's home every such line comes from the test suite:
+  [CR195](../project/refinement/rs010-cv22-oracle-and-port-hygiene/cr195-the-test-suite-writes-four-lines-into-the-real-home-s-front-door-log.md),
+  captured.
+- One macOS CI run on PR #54 failed in the updater smoke's package lane with a bare exit
+  1 and passed on re-run. Noted; not yet understood.
+
+## Upgrading
+
+```bash
+mirror runtime update
+```
+
+On Windows, the installer at mirror-mind-ai/mirror-installer pins the core version it
+ships; this release is the one its Claude Code hooks need.
+
+## Next Horizon
+
+Alan Nascimento's PR #51 (the stop hook losing a reply) and Moacir Moda's PR #27; CR190,
+CR192, and CR195 in RS010's backlog. CV24 continues on its branch.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mirror-mind",
-  "version": "0.39.2",
+  "version": "0.39.3",
   "description": "Mirror Mind: a local-first memory and identity framework for agentic AI runtimes (Pi, Claude Code, Codex, Antigravity)",
   "license": "MIT",
   "repository": {

package/plugins/mirror-mind/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mirror-mind",
-  "version": "0.39.2",
+  "version": "0.39.3",
   "description": "Mirror Mind — local-first memory and identity for agentic runtimes.",
   "author": {
     "name": "Mirror Mind"
@@ -10,7 +10,7 @@
       "command": "/bin/sh",
       "args": [
         "-c",
-        "mmbin=\"\"; [ -n \"$MIRROR_BIN\" ] && [ -x \"$MIRROR_BIN/mirror\" ] && mmbin=\"$MIRROR_BIN/mirror\"; [ -n \"$mmbin\" ] || mmbin=\"$(command -v mirror 2>/dev/null)\"; for mmdir in \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmbin\" ] && break; [ -x \"$mmdir/mirror\" ] && mmbin=\"$mmdir/mirror\"; done; [ -n \"$mmbin\" ] || { echo \"mirror-mind: mirror not found on PATH; the MCP server cannot start. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory.\" >&2; exit 1; }; mmnode=\"$MIRROR_NODE\"; [ -n \"$mmnode\" ] && [ -x \"$mmnode\" ] || mmnode=\"$(command -v node 2>/dev/null)\"; for mmdir in \"$(dirname \"$mmbin\")\" \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmnode\" ] && break; [ -x \"$mmdir/node\" ] && mmnode=\"$mmdir/node\"; done; [ -n \"$mmnode\" ] || { echo \"mirror-mind: node not found on PATH; the MCP server cannot start. Set MIRROR_NODE.\" >&2; exit 1; }; exec \"$mmnode\" \"$mmbin\" mcp"
+        "mmbin=\"\"; [ -n \"$MIRROR_BIN\" ] && [ -x \"$MIRROR_BIN/mirror\" ] && mmbin=\"$MIRROR_BIN/mirror\"; [ -n \"$mmbin\" ] || mmbin=\"$(command -v mirror 2>/dev/null)\"; for mmdir in \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmbin\" ] && break; [ -x \"$mmdir/mirror\" ] && mmbin=\"$mmdir/mirror\"; done; [ -n \"$mmbin\" ] || { echo \"mirror-mind: mirror not found on PATH; the MCP server cannot start. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory.\" >&2; exit 1; }; mmjs=\"$(dirname \"$mmbin\")/node_modules/mirror-mind/bin/mirror.js\"; [ -f \"$mmjs\" ] && mmbin=\"$mmjs\"; mmnode=\"$MIRROR_NODE\"; [ -n \"$mmnode\" ] && [ -x \"$mmnode\" ] || mmnode=\"$(command -v node 2>/dev/null)\"; for mmdir in \"$(dirname \"$mmbin\")\" \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmnode\" ] && break; [ -x \"$mmdir/node\" ] && mmnode=\"$mmdir/node\"; done; [ -n \"$mmnode\" ] || { echo \"mirror-mind: node not found on PATH; the MCP server cannot start. Set MIRROR_NODE.\" >&2; exit 1; }; exec \"$mmnode\" \"$mmbin\" mcp"
       ]
     }
   }

package/plugins/mirror-mind/agy/pre-invocation.sh

@@ -61,6 +61,14 @@ for candidate in "$HOME/.nvm/current/bin" /opt/homebrew/bin /usr/local/bin; do
   [ -n "$ENTRY" ] && break
   [ -x "$candidate/mirror-hook" ] && ENTRY="$candidate/mirror-hook"
 done
+# On Windows npm writes no symlink: the `mirror-hook` in its global prefix is
+# a POSIX shell shim, and `node_modules/` sits beside it. Node cannot run the
+# shim ("node exited 1" in hooks.log on every hook); the entry it wraps is the
+# package's own bin, so that is the entry when it is there. A POSIX prefix
+# keeps node_modules under lib/ and its bin is already the .js: no change.
+shim_entry=""
+[ -n "$ENTRY" ] && shim_entry="$(dirname "$ENTRY")/node_modules/mirror-mind/bin/mirror-hook.js"
+[ -n "$shim_entry" ] && [ -f "$shim_entry" ] && ENTRY="$shim_entry"
 
 if [ -z "$ENTRY" ]; then
   note "mirror-hook not found on PATH; hook skipped. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory."

package/plugins/mirror-mind/agy/session-start.sh

@@ -61,6 +61,14 @@ for candidate in "$HOME/.nvm/current/bin" /opt/homebrew/bin /usr/local/bin; do
   [ -n "$ENTRY" ] && break
   [ -x "$candidate/mirror-hook" ] && ENTRY="$candidate/mirror-hook"
 done
+# On Windows npm writes no symlink: the `mirror-hook` in its global prefix is
+# a POSIX shell shim, and `node_modules/` sits beside it. Node cannot run the
+# shim ("node exited 1" in hooks.log on every hook); the entry it wraps is the
+# package's own bin, so that is the entry when it is there. A POSIX prefix
+# keeps node_modules under lib/ and its bin is already the .js: no change.
+shim_entry=""
+[ -n "$ENTRY" ] && shim_entry="$(dirname "$ENTRY")/node_modules/mirror-mind/bin/mirror-hook.js"
+[ -n "$shim_entry" ] && [ -f "$shim_entry" ] && ENTRY="$shim_entry"
 
 if [ -z "$ENTRY" ]; then
   note "mirror-hook not found on PATH; hook skipped. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory."

package/plugins/mirror-mind/agy/stop.sh

@@ -61,6 +61,14 @@ for candidate in "$HOME/.nvm/current/bin" /opt/homebrew/bin /usr/local/bin; do
   [ -n "$ENTRY" ] && break
   [ -x "$candidate/mirror-hook" ] && ENTRY="$candidate/mirror-hook"
 done
+# On Windows npm writes no symlink: the `mirror-hook` in its global prefix is
+# a POSIX shell shim, and `node_modules/` sits beside it. Node cannot run the
+# shim ("node exited 1" in hooks.log on every hook); the entry it wraps is the
+# package's own bin, so that is the entry when it is there. A POSIX prefix
+# keeps node_modules under lib/ and its bin is already the .js: no change.
+shim_entry=""
+[ -n "$ENTRY" ] && shim_entry="$(dirname "$ENTRY")/node_modules/mirror-mind/bin/mirror-hook.js"
+[ -n "$shim_entry" ] && [ -f "$shim_entry" ] && ENTRY="$shim_entry"
 
 if [ -z "$ENTRY" ]; then
   note "mirror-hook not found on PATH; hook skipped. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory."

package/plugins/mirror-mind/hooks/log-assistant-reply.sh

@@ -56,6 +56,14 @@ for candidate in "$HOME/.nvm/current/bin" /opt/homebrew/bin /usr/local/bin; do
   [ -n "$ENTRY" ] && break
   [ -x "$candidate/mirror-hook" ] && ENTRY="$candidate/mirror-hook"
 done
+# On Windows npm writes no symlink: the `mirror-hook` in its global prefix is
+# a POSIX shell shim, and `node_modules/` sits beside it. Node cannot run the
+# shim ("node exited 1" in hooks.log on every hook); the entry it wraps is the
+# package's own bin, so that is the entry when it is there. A POSIX prefix
+# keeps node_modules under lib/ and its bin is already the .js: no change.
+shim_entry=""
+[ -n "$ENTRY" ] && shim_entry="$(dirname "$ENTRY")/node_modules/mirror-mind/bin/mirror-hook.js"
+[ -n "$shim_entry" ] && [ -f "$shim_entry" ] && ENTRY="$shim_entry"
 
 if [ -z "$ENTRY" ]; then
   note "mirror-hook not found on PATH; hook skipped. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory."

package/plugins/mirror-mind/hooks/log-session-end.sh

@@ -56,6 +56,14 @@ for candidate in "$HOME/.nvm/current/bin" /opt/homebrew/bin /usr/local/bin; do
   [ -n "$ENTRY" ] && break
   [ -x "$candidate/mirror-hook" ] && ENTRY="$candidate/mirror-hook"
 done
+# On Windows npm writes no symlink: the `mirror-hook` in its global prefix is
+# a POSIX shell shim, and `node_modules/` sits beside it. Node cannot run the
+# shim ("node exited 1" in hooks.log on every hook); the entry it wraps is the
+# package's own bin, so that is the entry when it is there. A POSIX prefix
+# keeps node_modules under lib/ and its bin is already the .js: no change.
+shim_entry=""
+[ -n "$ENTRY" ] && shim_entry="$(dirname "$ENTRY")/node_modules/mirror-mind/bin/mirror-hook.js"
+[ -n "$shim_entry" ] && [ -f "$shim_entry" ] && ENTRY="$shim_entry"
 
 if [ -z "$ENTRY" ]; then
   note "mirror-hook not found on PATH; hook skipped. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory."

package/plugins/mirror-mind/hooks/log-user-prompt.sh

@@ -56,6 +56,14 @@ for candidate in "$HOME/.nvm/current/bin" /opt/homebrew/bin /usr/local/bin; do
   [ -n "$ENTRY" ] && break
   [ -x "$candidate/mirror-hook" ] && ENTRY="$candidate/mirror-hook"
 done
+# On Windows npm writes no symlink: the `mirror-hook` in its global prefix is
+# a POSIX shell shim, and `node_modules/` sits beside it. Node cannot run the
+# shim ("node exited 1" in hooks.log on every hook); the entry it wraps is the
+# package's own bin, so that is the entry when it is there. A POSIX prefix
+# keeps node_modules under lib/ and its bin is already the .js: no change.
+shim_entry=""
+[ -n "$ENTRY" ] && shim_entry="$(dirname "$ENTRY")/node_modules/mirror-mind/bin/mirror-hook.js"
+[ -n "$shim_entry" ] && [ -f "$shim_entry" ] && ENTRY="$shim_entry"
 
 if [ -z "$ENTRY" ]; then
   note "mirror-hook not found on PATH; hook skipped. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory."

package/plugins/mirror-mind/hooks/mirror-inject.sh

@@ -56,6 +56,14 @@ for candidate in "$HOME/.nvm/current/bin" /opt/homebrew/bin /usr/local/bin; do
   [ -n "$ENTRY" ] && break
   [ -x "$candidate/mirror-hook" ] && ENTRY="$candidate/mirror-hook"
 done
+# On Windows npm writes no symlink: the `mirror-hook` in its global prefix is
+# a POSIX shell shim, and `node_modules/` sits beside it. Node cannot run the
+# shim ("node exited 1" in hooks.log on every hook); the entry it wraps is the
+# package's own bin, so that is the entry when it is there. A POSIX prefix
+# keeps node_modules under lib/ and its bin is already the .js: no change.
+shim_entry=""
+[ -n "$ENTRY" ] && shim_entry="$(dirname "$ENTRY")/node_modules/mirror-mind/bin/mirror-hook.js"
+[ -n "$shim_entry" ] && [ -f "$shim_entry" ] && ENTRY="$shim_entry"
 
 if [ -z "$ENTRY" ]; then
   note "mirror-hook not found on PATH; hook skipped. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory."

package/plugins/mirror-mind/hooks/session-start.sh

@@ -56,6 +56,14 @@ for candidate in "$HOME/.nvm/current/bin" /opt/homebrew/bin /usr/local/bin; do
   [ -n "$ENTRY" ] && break
   [ -x "$candidate/mirror-hook" ] && ENTRY="$candidate/mirror-hook"
 done
+# On Windows npm writes no symlink: the `mirror-hook` in its global prefix is
+# a POSIX shell shim, and `node_modules/` sits beside it. Node cannot run the
+# shim ("node exited 1" in hooks.log on every hook); the entry it wraps is the
+# package's own bin, so that is the entry when it is there. A POSIX prefix
+# keeps node_modules under lib/ and its bin is already the .js: no change.
+shim_entry=""
+[ -n "$ENTRY" ] && shim_entry="$(dirname "$ENTRY")/node_modules/mirror-mind/bin/mirror-hook.js"
+[ -n "$shim_entry" ] && [ -f "$shim_entry" ] && ENTRY="$shim_entry"
 
 if [ -z "$ENTRY" ]; then
   note "mirror-hook not found on PATH; hook skipped. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory."

package/plugins/mirror-mind/mcp_config.json

@@ -4,7 +4,7 @@
       "command": "/bin/sh",
       "args": [
         "-c",
-        "mmbin=\"\"; [ -n \"$MIRROR_BIN\" ] && [ -x \"$MIRROR_BIN/mirror\" ] && mmbin=\"$MIRROR_BIN/mirror\"; [ -n \"$mmbin\" ] || mmbin=\"$(command -v mirror 2>/dev/null)\"; for mmdir in \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmbin\" ] && break; [ -x \"$mmdir/mirror\" ] && mmbin=\"$mmdir/mirror\"; done; [ -n \"$mmbin\" ] || { echo \"mirror-mind: mirror not found on PATH; the MCP server cannot start. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory.\" >&2; exit 1; }; mmnode=\"$MIRROR_NODE\"; [ -n \"$mmnode\" ] && [ -x \"$mmnode\" ] || mmnode=\"$(command -v node 2>/dev/null)\"; for mmdir in \"$(dirname \"$mmbin\")\" \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmnode\" ] && break; [ -x \"$mmdir/node\" ] && mmnode=\"$mmdir/node\"; done; [ -n \"$mmnode\" ] || { echo \"mirror-mind: node not found on PATH; the MCP server cannot start. Set MIRROR_NODE.\" >&2; exit 1; }; exec \"$mmnode\" \"$mmbin\" mcp"
+        "mmbin=\"\"; [ -n \"$MIRROR_BIN\" ] && [ -x \"$MIRROR_BIN/mirror\" ] && mmbin=\"$MIRROR_BIN/mirror\"; [ -n \"$mmbin\" ] || mmbin=\"$(command -v mirror 2>/dev/null)\"; for mmdir in \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmbin\" ] && break; [ -x \"$mmdir/mirror\" ] && mmbin=\"$mmdir/mirror\"; done; [ -n \"$mmbin\" ] || { echo \"mirror-mind: mirror not found on PATH; the MCP server cannot start. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory.\" >&2; exit 1; }; mmjs=\"$(dirname \"$mmbin\")/node_modules/mirror-mind/bin/mirror.js\"; [ -f \"$mmjs\" ] && mmbin=\"$mmjs\"; mmnode=\"$MIRROR_NODE\"; [ -n \"$mmnode\" ] && [ -x \"$mmnode\" ] || mmnode=\"$(command -v node 2>/dev/null)\"; for mmdir in \"$(dirname \"$mmbin\")\" \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmnode\" ] && break; [ -x \"$mmdir/node\" ] && mmnode=\"$mmdir/node\"; done; [ -n \"$mmnode\" ] || { echo \"mirror-mind: node not found on PATH; the MCP server cannot start. Set MIRROR_NODE.\" >&2; exit 1; }; exec \"$mmnode\" \"$mmbin\" mcp"
       ]
     }
   }

package/plugins/mirror-mind/plugin.json

@@ -1,13 +1,13 @@
 {
   "name": "mirror-mind",
   "description": "Mirror Mind — local-first memory and identity for agentic runtimes.",
-  "version": "0.39.2",
+  "version": "0.39.3",
   "mcpServers": {
     "mirror-mind": {
       "command": "/bin/sh",
       "args": [
         "-c",
-        "mmbin=\"\"; [ -n \"$MIRROR_BIN\" ] && [ -x \"$MIRROR_BIN/mirror\" ] && mmbin=\"$MIRROR_BIN/mirror\"; [ -n \"$mmbin\" ] || mmbin=\"$(command -v mirror 2>/dev/null)\"; for mmdir in \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmbin\" ] && break; [ -x \"$mmdir/mirror\" ] && mmbin=\"$mmdir/mirror\"; done; [ -n \"$mmbin\" ] || { echo \"mirror-mind: mirror not found on PATH; the MCP server cannot start. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory.\" >&2; exit 1; }; mmnode=\"$MIRROR_NODE\"; [ -n \"$mmnode\" ] && [ -x \"$mmnode\" ] || mmnode=\"$(command -v node 2>/dev/null)\"; for mmdir in \"$(dirname \"$mmbin\")\" \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmnode\" ] && break; [ -x \"$mmdir/node\" ] && mmnode=\"$mmdir/node\"; done; [ -n \"$mmnode\" ] || { echo \"mirror-mind: node not found on PATH; the MCP server cannot start. Set MIRROR_NODE.\" >&2; exit 1; }; exec \"$mmnode\" \"$mmbin\" mcp"
+        "mmbin=\"\"; [ -n \"$MIRROR_BIN\" ] && [ -x \"$MIRROR_BIN/mirror\" ] && mmbin=\"$MIRROR_BIN/mirror\"; [ -n \"$mmbin\" ] || mmbin=\"$(command -v mirror 2>/dev/null)\"; for mmdir in \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmbin\" ] && break; [ -x \"$mmdir/mirror\" ] && mmbin=\"$mmdir/mirror\"; done; [ -n \"$mmbin\" ] || { echo \"mirror-mind: mirror not found on PATH; the MCP server cannot start. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory.\" >&2; exit 1; }; mmjs=\"$(dirname \"$mmbin\")/node_modules/mirror-mind/bin/mirror.js\"; [ -f \"$mmjs\" ] && mmbin=\"$mmjs\"; mmnode=\"$MIRROR_NODE\"; [ -n \"$mmnode\" ] && [ -x \"$mmnode\" ] || mmnode=\"$(command -v node 2>/dev/null)\"; for mmdir in \"$(dirname \"$mmbin\")\" \"$HOME/.nvm/current/bin\" /opt/homebrew/bin /usr/local/bin; do [ -n \"$mmnode\" ] && break; [ -x \"$mmdir/node\" ] && mmnode=\"$mmdir/node\"; done; [ -n \"$mmnode\" ] || { echo \"mirror-mind: node not found on PATH; the MCP server cannot start. Set MIRROR_NODE.\" >&2; exit 1; }; exec \"$mmnode\" \"$mmbin\" mcp"
       ]
     }
   }

package/ts/src/frontDoor/cli.ts

@@ -170,7 +170,7 @@ import {
 } from "./render/tasksImportSync.ts";
 import { renderWeekView } from "./render/week.ts";
 import { retiredRefusal, routeMemoryCommand } from "./routing.ts";
-import { runRuntimeReadRoute, runWelcomeRoute } from "./runtimeRoute.ts";
+import { isRuntimeVerdict, runRuntimeReadRoute, runWelcomeRoute } from "./runtimeRoute.ts";
 import { runMemorySearchRoute } from "./searchRoute.ts";
 import { resolveSeedPaths } from "./seedPaths.ts";
 import { isSessionStartWelcome, runSessionStartWelcomeRoute } from "./sessionStartWelcomeRoute.ts";
@@ -1711,6 +1711,8 @@ interface DispatchOutcome {
   exitCode: number;
   /** Content-free route metadata for the durable front-door log. */
   detail?: string;
+  /** The non-zero exit is the command's answer, not a failure (`frontDoorLog.ts`). */
+  verdict?: boolean;
 }
 
 async function dispatch(argv: readonly string[]): Promise<DispatchOutcome> {
@@ -1819,7 +1821,13 @@ async function dispatchTs(argv: readonly string[]): Promise<number | DispatchOut
   // database, when at all, through a read-only handle -- no bootstrap, no
   // migrate-on-open, and for `welcome --status-line` no subprocess whatsoever.
   if (argv[0] === "welcome") return runWelcomeRoute(argv);
-  if (argv[0] === "runtime") return runRuntimeReadRoute(argv);
+  if (argv[0] === "runtime") {
+    const exitCode = await runRuntimeReadRoute(argv);
+    // A verdict, not a failure: `isRuntimeVerdict` says which (CR139).
+    return isRuntimeVerdict(argv, exitCode)
+      ? { exitCode, detail: "verdict=attention", verdict: true }
+      : exitCode;
+  }
   if (argv[0] === "mcp") return runMcpServer();
   if (isMemorySearch(argv)) return runMemorySearch(argv);
   if (isConsult(argv)) {
@@ -1895,6 +1903,7 @@ export async function main(rawArgv = process.argv.slice(2)): Promise<number> {
       route: decision.engine,
       exitCode: outcome.exitCode,
       ...(outcome.detail ? { detail: outcome.detail } : {}),
+      ...(outcome.verdict ? { verdict: true } : {}),
     });
     return outcome.exitCode;
   } catch (error) {

package/ts/src/frontDoor/frontDoorLog.ts

@@ -29,6 +29,13 @@ export interface FrontDoorLogEntry {
   exitCode: number;
   /** A short, content-free note or error category. Never argument values. */
   detail?: string;
+  /**
+   * The non-zero exit is the command's answer, not a failure: `runtime
+   * diagnose` exits 1 to say "attention needed". Logged at INFO, so the line
+   * does not count as a front-door error -- which `front_door_errors` reads,
+   * and which each diagnose with findings then fed, one line per run.
+   */
+  verdict?: boolean;
 }
 
 /** The log path for a resolved database path (sibling of the DB). */
@@ -40,7 +47,7 @@ export function frontDoorLogPath(dbPath: string): string {
 export function logFrontDoor(logPath: string | null, entry: FrontDoorLogEntry): void {
   if (!logPath) return;
   try {
-    const level = entry.exitCode === 0 ? "INFO" : "ERROR";
+    const level = entry.exitCode === 0 || entry.verdict ? "INFO" : "ERROR";
     const detail = entry.detail ? entry.detail.replace(/[\r\n\t]+/g, " ") : "";
     const line = [
       new Date().toISOString(),

package/ts/src/frontDoor/runtimeRoute.ts

@@ -254,6 +254,17 @@ function logWelcomeCheck(home: string, env: NodeJS.ProcessEnv, check: RemoteChec
 }
 
 /** Port of the read half of `cmd_runtime`. */
+/**
+ * `runtime diagnose` exits 1 to say "attention needed": its contract with
+ * scripts, not a failure. The front door logs that exit as a verdict (PR #50,
+ * CR139), at INFO, so `front_door_errors` does not count the diagnose that
+ * reported it -- every diagnose with findings used to feed the finding, one
+ * line per run. The rule lives here, beside the command whose contract it is.
+ */
+export function isRuntimeVerdict(argv: readonly string[], exitCode: number): boolean {
+  return argv[0] === "runtime" && argv[1] === "diagnose" && exitCode === 1;
+}
+
 export async function runRuntimeReadRoute(
   argv: readonly string[],
   io: InstallRouteIo = {},

package/ts/src/guards/claudePlugin.ts

@@ -111,6 +111,11 @@ export const MCP_LOCATOR = [
   '[ -n "$mmbin" ] || mmbin="$(command -v mirror 2>/dev/null)"',
   `for mmdir in ${GLOBAL_BIN_DIRS.join(" ")}; do [ -n "$mmbin" ] && break; [ -x "$mmdir/mirror" ] && mmbin="$mmdir/mirror"; done`,
   '[ -n "$mmbin" ] || { echo "mirror-mind: mirror not found on PATH; the MCP server cannot start. Install mirror-mind (npm install -g mirror-mind) or set MIRROR_BIN to its bin directory." >&2; exit 1; }',
+  // On Windows npm's global `mirror` is a POSIX shell shim with node_modules/
+  // beside it, and Node cannot run the shim; the package's own bin is the
+  // entry when it is there (a POSIX prefix keeps node_modules under lib/).
+  'mmjs="$(dirname "$mmbin")/node_modules/mirror-mind/bin/mirror.js"',
+  '[ -f "$mmjs" ] && mmbin="$mmjs"',
   'mmnode="$MIRROR_NODE"',
   '[ -n "$mmnode" ] && [ -x "$mmnode" ] || mmnode="$(command -v node 2>/dev/null)"',
   `for mmdir in "$(dirname "$mmbin")" ${GLOBAL_BIN_DIRS.join(" ")}; do [ -n "$mmnode" ] && break; [ -x "$mmdir/node" ] && mmnode="$mmdir/node"; done`,